使用方法
- 复制安装命令，在自己的智能体环境安装前先检查源码包。
- 从原始文档核对所需工具、凭据和支持的宿主。
- 说明输入材料与期望交付物，并对照来源检查输出。
npx skills add https://github.com/aicodeking/deepseek-stack --skill ds-blast-radius开始前需了解
- 安装不包含模型订阅、API 额度或访问文件的权限。
- 仓库星数和安装量反映活跃情况，不等于独立质量或安全测试。
仓库原始内容
按源仓库内容呈现，保留标题、案例、代码、表格、链接以及原文引用的演示图片。
ds-blast-radius
Listing callers is easy. The job is finding the breakage that a text search will not show, and proving the change is safe with a run instead of an argument.
Steps
- Read the change: the diff, the symbols it adds, changes or removes, and the behavior it now has that the diff does not spell out.
- Find the one or two facts the change is safe because of, for example "this only removes cache entries that are already expired". Most risk clears if that fact holds. Spend your effort here.
- Look where search stops. Read the source of libraries you call at their pinned version. Check timing: async ordering, teardown, retries. Follow data that leaves the code: API responses, database columns, file formats, config, other languages reading the same data.
- Grade each key fact by how far you proved it:
- you said so (worthless alone),
- you pointed at a real file and line,
- you traced the failure path and showed it cannot be reached,
- you ran a script or test against the real code that fails loudly if you are wrong,
- you reproduced it in the running app.
- Push each key fact to level 4 when it is cheap. Usually that is one small script calling the exact function in question.
- Report: the key facts, their proof level with the command and output, any real breakage found, and what stayed unproven.
Stop when
- Every key fact is at level 4 or higher, or you have said why it could not be, and the report is written.
- Or you found a real break. Report it with the repro and stop.
Rules
- A convincing write-up is not proof. Show output.
- Do not fix anything here. Hand fixes to the normal flow.
